{"report_id":"f5eabdef-b17e-4613-912c-4e69e9b809ed","version":0,"status":"done","tags":[],"date":"2026-10-15T01:32:01Z","url":{"schema":"http","addr":"sonycash.com/","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"104.21.18.89","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sonycash.com/","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"title":"USPS® Digital Debit®","dom":{"size":36343,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2942)","md5":"614842c854a6b2e4918fdb4becbf96a6","sha1":"7f762a2f10cd324552fcfb2fc5c5fb055c05c115","sha256":"f58d96f251525438347772801a57453a8691ed4d44a662aa8258346a2c7d3547","sha512":"3d703984b13db7b913d8ead68dabe547110f0079ac84d1ee08ae6685fc472eac2154d770d729df0fe7562eac2d0d7be92cfe542d07141c23d249b7c6f8b647e7","ssdeep":"768:FHtKYePdsY8zLKxpodiT9GKd3egJ+b0vLBi:yYpYULQzRGE3egRi","tlshash":"7ef296a010ae6e77433345c7a1829f82b0ef9d72c6555065f7bf4ab80fe0c91a51b63b","dom_hash":"domhash5715de24c563ea22194fe50d59ffe1df","first_seen":"2026-10-15T01:32:07.135144Z","last_seen":"2026-10-15T01:32:07.135144Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sonycash.com/","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"104.21.18.89","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T01:32:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"usps.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"usps.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sonycash.com","ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-15T01:12:07.260206Z","last_seen":"2026-10-15T01:12:07.260206Z","alert_count":70,"request_count":14,"received_data":3029042,"sent_data":8217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":4,"received_data":91804,"sent_data":2204,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usps.money","ip":{"addr":"192.0.78.135","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2025-02-11","domain_rank":0,"first_seen":"2026-10-15T01:12:07.262004Z","last_seen":"2026-10-15T01:12:07.262004Z","alert_count":2,"request_count":1,"received_data":364,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":10936,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sonycash.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.10","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-10-15T03:37:29.469408Z","times_seen":316627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/app.js?ver=1786294413","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"017f3e7066e448a3e1db82f21c1a8acd","sha1":"1bf8382495035eee6158f3d49e5b40e07f485c5b","sha256":"64139f2491a4aaa8e20a9b4fa9a5c2940df2de62c449a00c70abff406a0405d7","sha512":"100b6bad2beff97ab8a28a338f64242a75e66a2bec00b1f34f6f72bf500bb3a3af2124d40ed8d419028cb3113f8db58534256ae64723cb782aa2d4abc7e76f04","ssdeep":"24576:z3Rc/tRn1Mq4azJNIL2wJPg9KY1DeIVNegf6DqlTa2AT71q2Pp8:z3Rc/tZ1VNIL2I8VNegfplzAT71q2Pp8","tlshash":"78854b82376560bb428fa1d8049f5c0b923fd9b7844cc478ba94c9e719a8dd644fbf36","size":1840617,"data":"","first_seen":"2026-10-15T01:12:13.099951Z","last_seen":"2026-10-15T01:32:07.160154Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/url-bootstrap.js?ver=1783740162","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19deada7701b48b7883fc4011a3a84e2","sha1":"ddadbc46e50eeaa45e5915cdbd8e60f8111821c0","sha256":"93ba1b3be9cbde7a99a8441776ebf8f48478c0f215d95892a2f6786a8cf7ee59","sha512":"f89220c58d39f768004893a68ca536647d7bf2031d347aceea84c6697ab8ad864c5a237f9e50db1820695efb4bce472fc6bcf0ed45b411265b09e70612aa3483","ssdeep":"","tlshash":"2911a88813f33054a0b35038564b630836ae5543750bcd84bb5c4690bf9ab2bea72bc9","size":978,"data":"","first_seen":"2026-04-12T06:06:39.961984Z","last_seen":"2026-10-15T01:32:07.15256Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a674e2353863999aad19e6ca6135e93","sha1":"9a0612d61e7cda1f5742c520c834feb8805f74ef","sha256":"da76d93e72d7c2807d56123fae5a5135a561b13571814d5c49c0e31ac13b2283","sha512":"c60e242771223da4103faf33a3a1cc2dedf5e67bc99990fe825ca9fc935454afc59b6e4d6edc94ee2210b88b8ab6e2206bb1f413b654f20b64abfe20ffdb4d16","ssdeep":"","tlshash":"2c718599eb7938df33fa01f2653a4d47eb614436e784d038c9ae631424b1893c375a5a","size":3651,"data":"","first_seen":"2026-10-15T01:12:13.101128Z","last_seen":"2026-10-15T01:32:07.161544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.975Z","timestamp":1792027885975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571 HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 06:39:31 GMT\r\netag: \"e59c-6589780047f56-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2%2B0oM%2BxQv6XITtbTUz6z5s6vzmlJePbVIpev3wINBF8No0LYpYNCtTBEh8F6LuNv5LxSMRwa3DUSpREWPlqdBkLReiH4FUwy1pPb%2Ft7cxhHtgKdZg4xq4eBtz%2BCMyo%3D\"}]}\r\ncontent-type: text/css\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab106f5853b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9817\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58780,"size_decoded":10572,"mime_type":"text/css","magic":"ASCII text","md5":"db2cff3cb1109c0e514fe2c140f09175","sha1":"b4595af464a0d55a68fe1913086ea85a5ea65582","sha256":"3ffc6d310afbfb6af5746cf20f80e1fe1820bf68ce349f5debc57b8c776438c8","sha512":"fba9de5d33e64c99cd2e1a103ab2d1614c0a206b17a60b799300611c55920f0dcf7570395a33438fdb9c2e3c69e6df4a68acdec5ae273de9bef9c2c701049884","ssdeep":"384:DVum7Uvu3YtmFSSFGNPOTY7tZY7nn/aQY7XTCY7EBbHyVZ01qvzkjG+EPA9:xumotmFSSFGNPDPa5SV5vYNEPK","tlshash":"fb43834272a566ddb12b86a35852675ba3dc65a2860fc97c37fc30acde849de3131f0c","first_seen":"2026-10-15T01:12:13.093613Z","last_seen":"2026-10-15T01:32:07.137789Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.384Z","timestamp":1792027886384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sonycash.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 207197\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T03:30:21.560603Z","times_seen":50070,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/sony-cash.png","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.379Z","timestamp":1792027886379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/sony-cash.png HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\netag: \"ba7f-6564d5ebe0339\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nu2WtxJtOtV20k2Sw676Mh%2BuU9EVLIh3bQ%2B%2Fk0IgSdBK33JvocA5ddi35WB%2Bf%2FAWy0Owtm7EeHU6gO7jV2OG4hvy0mU0kcfBt%2BDnPz4rEEdmjUuc5wfPM56mhfMIi%2Fc%3D\"}]}\r\ncontent-type: image/png\r\nage: 1202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab1071d8a4b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47743,"size_decoded":48451,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"abca2dbf172ddda8d85aabfd4e4e4688","sha1":"85f770aed8ef02e3c950f259184a4d6788a039fd","sha256":"8531f2815660b6cec53dbce7d8a5db659bafab0bc0a205123914c2bb37781896","sha512":"621e50d7613e74f4405338015ba56264c0118b2362e89853dbb9da43cca95bab5c4541b735a799b15d5742ebf05e864253b5bfb01d566291a7eee2f13576e23d","ssdeep":"768:5v/kf9kM5dRMk/72dFfEqtt8SKz08DWXU9ZpWWcH3lxyb6QhxnNk3LXEvuIMID:t/kf9k5Ffr8SZ8D19GWc3OH6LXzKD","tlshash":"b023e0a9a352caa31d38109e49ed04667f2066500e4a4f70f0b5a5b97cf6d2d23f7f2d","first_seen":"2026-10-15T01:12:13.098487Z","last_seen":"2026-10-15T01:32:07.140541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/polygon.png","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.381Z","timestamp":1792027886381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/polygon.png HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\netag: \"4c85-6564d5ebd95d9\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTKu7DOJqGnGl72jJ5YcRTXF5XyGlmMLiLWLiFatTi1D4JO1EDRuLKTM8pqyUR%2Fz4EvZD%2BFeOT1ZKsx6Uo0Ue6CKxO0oVzHkfXZSuVpdPPez%2FxSh431sz7s%2BI2gXXcE%3D\"}]}\r\ncontent-type: image/png\r\nage: 1202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab1071d8a6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19589\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19589,"size_decoded":20291,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e04f4e6889a8da9e55b3044972d19e2b","sha1":"11f00a29f4e39fa1f20990c65951cba7755a62f9","sha256":"fc4eec6ad5e80e7f02ba89afd7abb858973ce9f5ee38c568ac90cd992957d1f6","sha512":"c388b4e51e98e759a1cc231c823ac4bf0bd238465a90f9a13a6274fb983186d7611616e470fba3051fc98c182e030f04422e04be813f13ee0574740ddca4e1e3","ssdeep":"384:zyzh4N60928tZK9hyeUTkG5spvIXRJJM63lbKGJdrEnV88Mv5uTg7+nmQrc:mzhq1kqyyL55spWv5mGJdr8+Rj","tlshash":"6c92e15789d3e4a2ea1b82f8de06f839441e7747a517a5c8ea2c31ffc55904a04fccd4","first_seen":"2025-08-11T22:21:04.77415Z","last_seen":"2026-10-15T01:32:07.141937Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/uploads/fbrfg/favicon.svg","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.456Z","timestamp":1792027886456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon.svg HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 16:37:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"47d13-64faa91d6b761\"\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ced%2F4E%2FR41EYHUiL2jGqS1hLqZ%2BH8zQG0F2CvyuSZFFCr2TPmL%2BpI3p0sqC2ndFhlQ1X48qMgqTzzu4Shhbe2WNhZo0A32ChXb3DHGwdS3jc20wMlh10v2kzBr3nFQU%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nage: 1202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4ab107258b2b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294163,"size_decoded":187665,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2500909eee2aa62b03727818cb803f04","sha1":"8424317772db8973dca250fe1bbb0c0268b4762b","sha256":"dc1c3cd2aa02b6e9f9c82a1fa2615bd9d0792df11c9f1b4d88dbe6744966b2d8","sha512":"59492d84b3bcdaccd957ac0441d01afa7e8594dccae1cbe663d4bce370dffe8e379d704b2debf93b36f1a41b33ff9797d0d373eaf01a4dbad0909e7469cfb1c2","ssdeep":"6144:BqcfYVwNgdr10Iq67MhJ0RDhF1/TmaWbmFIV2jCsZR0uk8sxd8Ho:Bq1VwNg51vwhJMFF1BK2msvm4I","tlshash":"7b543a659a5e76fdba32ad5dce0a2c6b1c4814dca210c4cfac4ea3f5937a4748d1dcb0","first_seen":"2026-04-22T21:58:16.968412Z","last_seen":"2026-10-15T01:32:07.143515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.112Z","timestamp":1792027886112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sonycash.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:50:42 GMT\r\nexpires: Tue, 12 Oct 2027 16:50:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204044\r\nlast-modified: Tue, 09 Sep 2025 18:59:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14044,"size_decoded":14857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14044, version 1.0","md5":"aa6302b69a6dc6b6d59db30b8b53b4df","sha1":"3a6769dd478cf555100492eeb71443ae3fcc38b1","sha256":"3aa555c528430aab19bb2693dc206bab557767d3082dba66400784c9cc90cfbb","sha512":"a4f3ea1d008c61e485b88897e823cb3003add30db71cabc4fa0bdbcd7752547d34f6588b87b6e5680dabe6b550270c3f7b31dff2f90625fcef6fed00f3b0e3c8","ssdeep":"384:59+7XJp6wwLpd6EplhtnekZdYIzs6bc/Tmaryc7o8:5c7z38sEprtne+YIQ6bO/+0o8","tlshash":"4052d001dd85caf1e71d9a319d587424dceb5cf2b0a41096d92bb520c7842aab3fa4bc","first_seen":"2025-06-22T00:41:53.960552Z","last_seen":"2026-10-15T01:32:07.144811Z","times_seen":875,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/app.js?ver=1786294413","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.977Z","timestamp":1792027885977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/app.js?ver=1786294413 HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 16:53:33 GMT\r\netag: \"1c15e9-658a013f8f960-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCFlXZJi4C%2FD0Zb%2F%2BcHHpyzwF6R%2FsOK4Fpzu57RzOKcipDva6vldswn7gsn%2FydedJXYulXrYGak%2FbtMO7JT7vGzWrIDPZZtkRAo0hlvAxscTU36RM454QKCEqqWY8W0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4ab106f5854b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1840617,"size_decoded":552437,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"57b667e7c438d7cf66ddf52dc60e3216","sha1":"638ef013bb0b451d18c7b9d9241f5b37bbc6cade","sha256":"f88a57ef2ba45a519eb71a64678d359c9f2abf8b5053504266cbcdfdf2fe556a","sha512":"2d29f9e7eb882839f41f820ab1c6b7224d55db66ef9d67481cebe6bb6c8becaeb61f0e37d055ef6cadffeb668a889e42028f3fdadfb2e358def49a069bd83161","ssdeep":"12288:lk63RcwEtRSGd5rbdwjq4aamFvsvo/IL9Gh6:z3Rc/tRn1Mq4azJNIL26","tlshash":"6b25f983271810bf018ed2dc049e9c4b853fdab7984cd979aea0d59705e4ee644faf27","first_seen":"2026-04-22T21:58:16.978876Z","last_seen":"2026-10-15T01:32:07.145918Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/images/Bishiki_USPS_Logo.png","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.985Z","timestamp":1792027885985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/images/Bishiki_USPS_Logo.png HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\netag: \"6b590-6564d5ebd5759\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdWUnN%2Fn%2FLPwNHaJqC70SL2BI1Hfki5qO%2FgbQSOywjQgwmxSMZ0ciol%2BBQdrVSlRtshqqnn9Yh9mc4ReiBs7%2BO1Yom5vIuamcEToltK%2F2vAh8I66VQFLJPQ4ctQ5knA%3D\"}]}\r\ncontent-type: image/png\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab106f6856b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 439696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439696,"size_decoded":440404,"mime_type":"image/png","magic":"PNG image data, 553 x 859, 8-bit/color RGBA, non-interlaced","md5":"2242dbed8eebd81bc70dc22cf597ba97","sha1":"96219c3e8a63ffc00a277714a6f927ea0c500fe4","sha256":"85025d34f42191e1f72ceb0f6bcebbf5476b54b9f55544f652e7c559cad5e59f","sha512":"36f714d56ee7ebff42963fe81f3e8998a4cfb01f72cc8dbe36a833b095771b7952dcb00daf0b299a014e10f7ae4234e05c7a79aa55dbe11934e2b7e9402c64ef","ssdeep":"12288:K82Yg9wCJxBa9WE9AkkhnaaAjc+NdQqTPCW7DVwGson:K82XwCJhCChaVdvTl7qGd","tlshash":"cd94230f95e6cebfbb3cd4710b9876018db85d8846dc41506f69fc96eb3b061a8c62d2","first_seen":"2026-04-04T08:36:22.647781Z","last_seen":"2026-10-15T01:32:07.146698Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/digital-debit-icon.svg","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.992Z","timestamp":1792027885992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/digital-debit-icon.svg HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7fc-6564d5ebdf399\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPmEbjRbiEAelSuKvCWQggoV1KhxrSuqQozM6vSTxQqfdrSLt%2FvDmgp8xr%2Bq6uaBlWl%2FOwCz9tag51ShBwFOZWkCEBcoD8wxnUKMgsKz%2BXKZfcIxqaltjjJ3u59Dl9I%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4ab106f685ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2044,"size_decoded":1344,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8f8c56d77469512dd4e12f00ec33949","sha1":"68808bf24564d20c68ffc070927994f1b93fa4cf","sha256":"25e580f6a021b5ddec19c5da3e740a52acaa907faea44f3c9a5f225c2ceb0aa6","sha512":"6e0a1cc4f4569a826492946bf233f951d06f85ef39e43b3e3be94568bb5f35953e5300c803ad61d5d527c3f1b5a6ca3d29d8fc7162531fa1ff3e9a99815add4a","ssdeep":"","tlshash":"1f41305c3d4c009d280d03c9cbd75556221fd1b731710cbabe9e2a71562376dfbda686","first_seen":"2026-04-04T08:36:22.648712Z","last_seen":"2026-10-15T01:32:07.147404Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/usps-usd-icon.svg","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.093Z","timestamp":1792027886093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/usps-usd-icon.svg HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2bb5-6564d5ebe12d9\"\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2IHv0Mlcs7DXXAYA30%2FrBPYp85%2BCU7LSYxNYVFHQFYNudUlYpL6Ra%2FPQvbeKxoYKj40ODaiN78FKyXWPwKhtI7NhNIfAYALmSHCySXwG92uAlqoC8RSP0AJn%2Foq%2FkE%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a4ab10700868b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11189,"size_decoded":5681,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ef0fb28e5f474121a2478e3af4f2798","sha1":"2f6fb9c5d20619df05dd7d57ade7f1791cecd4ca","sha256":"d3aba09c5fe645fe70bed797d142b0c6bace5cb3c05ad3ff44b4d467de118b40","sha512":"3e16e4406ea67065ca5cc04106903120959d225550f1fc60cad48f5481ee1c5fc5a049e361ab2c8ec9a7cca973f1f4db0a7c3b9dde8a3af8d06f6a9ed5f8f903","ssdeep":"192:xj6GZQHEPUa26IfR+l7DCLBA+nFFBLA1S0suFY0ycIlsYM5t+DUHzY32wKYGyduu:pVCaWwU0sKy9DDiYx1v","tlshash":"4e32faec735c44f8ff0d5be59c6608db6b2b247a2960c16cc29d9d402a131ed98599cf","first_seen":"2026-04-12T06:06:39.937117Z","last_seen":"2026-10-15T01:32:07.148742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.109Z","timestamp":1792027886109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sonycash.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 207197\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T03:30:21.560603Z","times_seen":50070,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":17,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.110Z","timestamp":1792027886110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sonycash.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:58:09 GMT\r\nexpires: Tue, 12 Oct 2027 15:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 207197\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-10-15T03:30:21.560603Z","times_seen":50070,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usps.money/wp-content/plugins/pwa-for-wp/images/logo-512x512.png","fqdn":"usps.money","domain":"usps.money","tld":"money"},"ip":{"addr":"192.0.78.135","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.454Z","timestamp":1792027886454,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/pwa-for-wp/images/logo-512x512.png HTTP/1.1\r\nHost: usps.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:31:30 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nx-ac: 24.arn _atomic_ams MISS\r\nx-remembering: Eric Binnion \u003chttps://friendsofericbinnion.wordpress.com/\u003e\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=182.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T03:38:33.091252Z","times_seen":19113141,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"usps.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"usps.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T01:31:25.033Z","timestamp":1792027885033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlink: \u003chttps://sonycash.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXue8h%2FpS7UMS0GOEpAvrII%2FBwYL9RO5kUkCJWgfuSYvQekif6I%2B%2FTa0A1JSKanG6RE4kaJvZRlq%2F%2FIFgjBBfy0f8HH9haC1TJE%2Blaxim5sSV6h0UhGjXmmfyph4ftI%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a4ab1069af4db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":30612,"size_decoded":8742,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2942), with CRLF, LF line terminators","md5":"e4dc388ac1a0670c43cf1aba48db8f75","sha1":"83f848e23de113d79c879c50283e1e2d8fd3df38","sha256":"95a21aad42d056ce470984436f921af878bd7a5d7b0369e49ffa5887fb4acb7b","sha512":"cbe7168ff328fdc4efd1f7ea073cb7b89dccbd7d217ee37553692edab7704edbed5915054a1f8cbad72d09b00dacb616af679a429b0241ebadd27a754e46d83a","ssdeep":"384:moOijAeH7YLjbCYuqqC/PLJl0LTtllYtwtt3ht0nLagTOwYSL4flDfsXQio4H9x8:jHPbHYPYh3WVL93hx3egJ+b0vLBK","tlshash":"d9d2a4a0101d7f7b432346c7b193ef86b0af9d31d6546075f7bb86a50be0c80a61b66b","first_seen":"2026-10-15T01:12:13.077287Z","last_seen":"2026-10-15T01:32:07.150956Z","times_seen":2,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":8,"connect":23,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/url-bootstrap.js?ver=1783740162","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.979Z","timestamp":1792027885979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/js/url-bootstrap.js?ver=1783740162 HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\netag: \"3d2-6564d5ebe12d9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUuEzwgUpxmtzsr%2F8So2YU%2BLzDMfGzGUjqe7GWtHebq%2BI0mNahke6TFhS25FFIgi2GKdM00ytTQdgSdxq4SUt3Ixi6VlaFa81eIzdUmK2wezgZmGmpPoEtiMYEfZ7BA%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab106f5855b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 423\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":978,"size_decoded":1181,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"19deada7701b48b7883fc4011a3a84e2","sha1":"ddadbc46e50eeaa45e5915cdbd8e60f8111821c0","sha256":"93ba1b3be9cbde7a99a8441776ebf8f48478c0f215d95892a2f6786a8cf7ee59","sha512":"f89220c58d39f768004893a68ca536647d7bf2031d347aceea84c6697ab8ad864c5a237f9e50db1820695efb4bce472fc6bcf0ed45b411265b09e70612aa3483","ssdeep":"","tlshash":"2911a88813f33054a0b35038564b630836ae5543750bcd84bb5c4690bf9ab2bea72bc9","first_seen":"2026-04-12T06:06:39.961984Z","last_seen":"2026-10-15T01:32:07.15256Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/scanid-logo.png","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.988Z","timestamp":1792027885988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/scanid-logo.png HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\netag: \"3529a-6564d5ebd7699\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcCl3jntpkWKAMoWXKmlptIUGCb2PoJyNxNtJ1Coa9Kw%2FbxdPAQYD8QinPZZCN7iPKNZunzVxVkNeN0QlrkA4DpGyXF001uzs85K%2FNxzNSVr7bEYdS1%2FJYO5pb690%2Fs%3D\"}]}\r\ncontent-type: image/png\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab106f6857b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 217754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217754,"size_decoded":218458,"mime_type":"image/png","magic":"PNG image data, 1200 x 1193, 8-bit/color RGBA, non-interlaced","md5":"86fb8a2e26eb24b9ee69e697a79c0db4","sha1":"a608c069c7a37f3f66dc143db33f33c66493b5d4","sha256":"3ed997d616de65e42e3ec42f814023da3e91f48232ea21f85cf6d95c08820d64","sha512":"82ca000b369600aebe60ea268b8ddf2870e6449674109656eede857423e62033ab3b1efbbc6901ae5d99dc6e33541d1695803129d7f270766b6791f6f8283463","ssdeep":"6144:rCLHpn/faY8/wId6MFgaU34rJ+1Jjr0HzHX04SMGG+l3O0x3gNge:rCV/SYF26naU30+1J30s5l3O0Cge","tlshash":"0124121e4e39ee73f200f888ae79c06ef65704bc96743459093ae3cded610576b062b6","first_seen":"2026-04-04T08:36:22.652452Z","last_seen":"2026-10-15T01:32:07.153641Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/cart-icon.svg","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.990Z","timestamp":1792027885990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/cart-icon.svg HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:25 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6708-6564d5ebd7699\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyzOgbK9fHafH%2BiHZ%2BnbRHy0TUbpFhKFYZkc4S2PhGuAnSDNdwSSv82nkeqxPtEpXZjYr6tG7hrVF16ciczRhsnBjhEqnEO6sU%2B6ovUY%2FMmBC24Dezn48KTtEG%2F7FcU%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nage: 1203\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4ab106f6859b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26376,"size_decoded":11622,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9607422c65d15046ff88a9bdfc15ace","sha1":"aed1366ef0286da88f6e4cf13fae87fc76f23656","sha256":"9a097fe1942d6f773a2296f5cf1c96a627b85f6e4e30ff2403ccbb5f29f91025","sha512":"e172543bed5ad71511f2aba4bbaebecd06237d086b0ae4948c49963ce765c914a4252ae02b577083a1dcd2baf3edd95d4b14eb1b4af509cf35375ed77232d52b","ssdeep":"768:AIUeKpkp7bnX8UbsGbM3FOD4200P5jEME:VKpklXGG2w420EE","tlshash":"46c2d8fdaba84cdacc0a9bd5dd1386cb59d604f72e8441b9c284e78b349207cdb478c6","first_seen":"2026-04-04T08:36:22.646624Z","last_seen":"2026-10-15T01:32:07.154671Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/ticketmaster-favicon.svg","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.380Z","timestamp":1792027886380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/images/ticketmaster-favicon.svg HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/wp-content/plugins/usps-digital-debit-wallet-fork-v8.1.3-uspsmoney/assets/pwa/css/styles.css?ver=1786257571\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jul 2026 03:22:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1a81-6564d5ebdf399\"\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dgBUDzBUNJ7Ae8MkadmeuF361BFhYaqBpqnsdABtBblyewoJ8kh8UmbLU%2B8V1%2B3drnJStGECpR6oTxIjhBXzJo5jTbl9Uz1M9PZbFrtM3slqu03GZLSa9TsyoAgSlM%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nage: 1202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a4ab1071d8a5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6785,"size_decoded":3666,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d2cbbbf82f2413308b7a67ff4a95eec","sha1":"48d8c2cde417a75d03347e140132c29e8daa3502","sha256":"99ddb96b11c29901be921e9ee91b724161ec8e788dc799a6d64c25f07265349a","sha512":"f863fd1469dcd9b9dd766ac802d9a1832c8821c4433dd778392c431469478de207c011f2dc725ca6b25e45d9305979e274c42defbb045188d45935a740580105","ssdeep":"96:gvC73fMdS2PAEGq0wfH7xRZz+LM4E6UfWHVtwt1XZ7zHCsQJ5TYd8pcJ:g6YddBh0wfdRRP4CfWH/wvXZviH5pQ","tlshash":"39e1f9d4b34c89f5c94ec7e2dce048b9652f307e6141a179ca9e39824e236e4988d5df","first_seen":"2026-10-15T01:12:13.092206Z","last_seen":"2026-10-15T01:32:07.155453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sonycash.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.10","fqdn":"sonycash.com","domain":"sonycash.com","tld":"com"},"ip":{"addr":"172.67.181.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:26.558Z","timestamp":1792027886558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sonycash.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 07:59:45 GMT","end":"Fri, 25 Dec 2026 07:59:44 GMT"},"fingerprint":{"sha1":"4F:E3:94:67:B4:B7:6E:80:69:73:5A:7B:F3:21:7E:B3:AE:3A:B2:C2","sha256":"30:6E:E4:36:3D:DA:0F:26:67:6F:DF:F1:D6:C9:D2:D4:FE:DA:4B:F1:96:DD:AC:EC:7B:DB:30:76:2A:21:F3:14"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.10 HTTP/1.1\r\nHost: sonycash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Feb 2026 18:38:18 GMT\r\netag: \"58ea-649efbe3dda80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0Y4c%2ByJgJDy0yqpBkr44iuYVF8UFHkGlGGrhZ%2FFqAnukexU8X%2B0zBNc3QM6S3fBw5M3dcMP%2BMSLEy7z4AYO5rHrKvcs%2Bgrh8Xno8HfY%2FrOrLkG1G2lk38BpgtyBq5w%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 1202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4ab1072f8c3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":6141,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-10-15T03:37:29.469408Z","times_seen":316627,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"sonycash.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"sonycash.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;700;800\u0026family=Oxanium:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sonycash.com/","date":"2026-10-15T01:31:25.972Z","timestamp":1792027885972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;700;800\u0026family=Oxanium:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sonycash.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 15 Oct 2026 01:31:26 GMT\r\ndate: Thu, 15 Oct 2026 01:31:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10252,"size_decoded":1455,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3687241307353466c60542a3bc7b645c","sha1":"4968d68b8bd7e2312e232481a312033fff10bf01","sha256":"d390435c77d387606b54fd5ca5195c5272f4312b115ec4f3cf568554ba3ac8b2","sha512":"cf9b8c2ef73293695fd505b4699ee443cb3b17ba9722c926d7a754d41522b883f870bf7dcfc148a8e845fc488c3eda813dbc548ba8945de3ff2c1ab7fb978f78","ssdeep":"192:zJDEV3WW8BRJ8rV3118S/JGNV3TT8ouJHYV3668dI18O1Dx:9wI+H2IQN","tlshash":"95229890002be804eb470cd577ce7e3aad4e61567455c5ba9bfe18d8acdbd222360b1e","first_seen":"2026-10-15T01:12:13.08594Z","last_seen":"2026-10-15T01:32:07.158454Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":32,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}